
Product
Introducing Pull Request Stories to Help Security Teams Track Supply Chain Risks
Socket’s new Pull Request Stories give security teams clear visibility into dependency risks and outcomes across scanned pull requests.
@citation-js/replacer
Advanced tools
Simple HTML API for Citation.js.
Create a bundle with the plugins you want to use with the Bundle Tool (here).
citation.js-replacer is a HTML API, so everything is done by adding HTML to your page.
To add a reference, insert any element with the class citation-js
. By default, the program will use the textContent
of the element as input.
<div class="citation-js">Q21972834</div>
You can also use pass input with the data-input
attribute.
<div class="citation-js" data-input="Q21972834">This text can now be ignored</div>
This is usefull, as you can put a fallback in the element, in case the API fails, JavaScript is blocked or the program doesn't work for another reason.
<div class="citation-js" data-input="Q21972834">
<a href="https://wikidata.org/wiki/Q21972834">Link</a>
</div>
You can specify output options too, with the data-output-*
attribute. These are the same as the Citation.js Output options. data-output-format
is reserved for the format name (bibliography
, citation
, bibtex
). It automatically fetches templates and styles that are not built into Citation.js.
<div class="citation-js" data-input="Q21972834" data-output-format="bibliography" data-output-template="apa">
<a href="https://wikidata.org/wiki/Q21972834">Link</a>
</div>
Input options and plugin configuration can be set by data-input-*
and data-plugin-$PLUGIN-*
respectively.
FAQs
HTML API for Citation.js
We found that @citation-js/replacer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket’s new Pull Request Stories give security teams clear visibility into dependency risks and outcomes across scanned pull requests.
Research
/Security News
npm author Qix’s account was compromised, with malicious versions of popular packages like chalk-template, color-convert, and strip-ansi published.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.